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(U)  'W’/NF/OC)  Derivea'Fz'OTi  :  G-3 

'  '  Declas^£r^\On:  XI 

(U)  Preliminary  Inquiry  Instituted:  10/11/2002,  set  to  expire 
02/07/2003. 


^NF/OC)  As  background,  on  09/11/2001,  American  Airlines 

representatives  provided  to  FBI  Headquarters  the  passenger  manifest 
for  American  Airlines  Flight  #77.  The  names  Nawaf  Al-Hazmi  and  Khalid 
Al-Midhar  were  included  on  the  passenger  manifest. 

X/NF/OC)  On  09/12/2001,  the  Washington  Field  Office  of 
the  FBI  was  notified  by  the  Dulles  Airport  Police  that  a  suspicious 
vehicle  was  found  at  the  Dulles  International  Airport  located  in  the 
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Hourly  Lot,  Row  G,  Herndon,  Virginia.  The  suspicious  vehicle  was 
described  as  a  1998  Toyota. 

^i/NF/OC)  Department  of  Motor  Vehicle  (DMV)  records 
determined  the  1988  Toyota,  with  California  license  plates,  Vehicle 
Identification  Number  JT2AE92E9J3137546 ,  was  registered  to  Nawaf  Al- 
Hazmi,  8451  Mt .  Vernon  Way,  Lemon  Grove,  California. 


NF/OC)  The  vehicle  was  searched  by  agents  anH  found  to 

contain  a  medical  prescription  for  Khalid  Al-Midhar,  from| _ 

_ San  Diego,  California,  a  receipt  for 

car  service  at  California  Motor  Works,  San  Diego,  California,  signed 
by  Khalid  Al-Midhar,  and  an  insurance  card  for  Khalid  Al-Midhar. 
Subsequent  investigation  determined  that  both  Al-Hazmi  and  Al-Midhar 
resided  in  San  Diego  in  1999  and  2000.  b6 


tu> 


(U) 
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NF/OC)  Also  found  during  the  search  of  Al-Hazmi 1 s 


vehicle  was  a  piece  of  paper  with|  |  written  on  it. 

Subsequent  search  of  telephone  databases  revealed  that  the  .telephone 


number  589-5316  was  subscribed  to[ 


& 


interviewea [ 


NF/OC)  On  09/20/2001,  FBI  agents  located  and 


] California. C 


he  was  associated  with  telephone  number  [ 


Admitted  that 


advised  that  he  was  enrolled  at  Grossmont  College.  Investigation  at 
Grossmont  College  revealed  I  bollegiate  email  address  as 


as  an  additional  email  account  on  his  student  record 


/NF/OC) 


]  provided  the  FBI  with  consent  to  search 


I 


his  residence  and  computer.  The  search  uncovered  a  box-cutter  and 
several  computer-generated  photographs  of  Usama  Bin  Laden.  A 
subsequent  search  of  the  computer  by  the  San  Diego  Regional  Computer 
Forensics  Laboratory  (RCFL)  revealed  several  occurrences  of  email 
addresses, I  I  and 


L 


I  It  also  revealed  email  messages  from 
I  The  i-nmnnt- ev  search  also  revealed  an  email 
_ to  email  account, 


address 

ss3000@hotmail . com.  On  10/30/2000  with  the  subject  stating:  "I'm  very 
very  sorry."  The  FBI  has  determined  that  Al-Hazmi  utilized  the 
ss3000@hotmail . com  account  in  late  2000  through  early  March  2001. 

'|1-1,1  (X^NF/OC)  Investigation  by  FBI  determined  that  Abdullah 

helped  acclimate  Al-Hazmi  and  Al-Midhar  to  the  San  Diego  area  and 
provided  assistance  with  their  travel  arrangements  and  flight  lessons 
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while  in  San  Diego.  In  early  2001,  Al-Hazmi  telephonically  contacted 
Abdullah  and  informed  him  that  Al-Hazmi  was  in  Arizona  attending 
flight  school . 

^^NF/OC)  Abdullah  provided  the  FBI  consent  to  search  his 
residence,  resulting  in  the  seizure  of  his  personal  computer,  located 
nn  Abdullah's  rnmm iter,  was  an  email  message  dated  09/13/2001,  from 


There  appeared  to  be  an  anti-American  bi£“  ad 

same  nation  that1  »as 


tone  to  tne  message,  as  it  queried,  "Is  it  the 
the  only  nation  in  history  to  use  atomic  weapons  in  anger... Does  this 
hypocrite  nation  have  the  right  to  call  anyone  a  terrorist  just 
because  they  condemn  its  unjust  practices?" 


(U> 


(A/NF/OC)  A  review  of  Abdullah's  computer  by  San  Diego 
RCFL  revealed  I  I  checked  his  email  from  Abdullah ' s 

computer  and  that  I  bent  several  emailjs  to  Abdullah,| 

in  2001.  A  home 


directory  ror£ 


iaoeiea  "My  Documents'! 


] Phone 


List,"  was  located  on  Abdullah's  computer.  Within  this  directory  were 
the  following  names  and  telephone  numbers: 


(U) 

"a  note  of  appreciation  and  thanks‘Tr 
Foundation.  jttl  \y 

'''  (X/NF/OC)  FBI  investigation  at  Grossmont 

College  also  revealed  that  email  address,  MOHDAR78PHQTMAIL.COM.  was 
provided  by  Mohdar  Abdullah  as  a  point  of  contact.  Grossmont  College 
further  provided  the  Abdullah's  collegiate  email  address  is  listed  as 
MOHDARABDULLAHP STUDENTS ■ GCCCD . NET . 


email  from  the 


received 
Holy  Land 


/X/NF/OC) 


On  09/21/2001,  Mohdar  Abdullah  was  arrested  on  a 
Material  Witness  warrant  for  Penttbomb  issued  out  of  the  Southern 
District  of  New  York,  after  he  declined  to  take  a  polygraph 
examination.  Abdullah's  vehicle  was  subsequently  seized.  During  the 
inventory  search,  a  spiral  notebook  was  obtained,  which  referenced 
planes  falling  from  the  sky,  mass  killings  and  hijacking. 


^NF/OC)  On  09/22/2001,  agents  obtained  and  executed  a 
sealed  federal_  search  warrant  for  the  current  residence  of  Mohdar 
Abdullah  at  Q 


Abdullah  was  renting  a  room  from 


] California . 


and  resided  with 
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him  and  his  two  sons, 
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j^/NF/OC)  On  10/01/2001,  the  results  of  a  court  order 
were  received  by  the  FBI  pertaining  to  Mohdar's  email  address, 
identified  as  mohdar78@hotmail . com.  MSN  Hotmail  provided  information 
that  disclosed  mohdar 78 Photmail . com  had  activity  from  08/15/1998  to 
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